-
Deloitte
October 9, 2026
Deloitte was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Professional Services. Country: United States of America. Website: www.deloitte.com. www.deloitte.com https://www.zoominfo.com/c/deloitte/14812699 Revenue
$74.5 Billion Deloitte is a global professional services organization providing audit and assurance, consulting, financial advisory, risk advisory, tax, legal and related services. Its capabilities also span cybersecurity, AI and data, enterprise technology, human capital and business process solutions. Deloitte serves organizations across a wide range of industries, helping clients manage complex challenges, transform operations, navigate risks, and drive sustainable growth.
Data info - soon
-
North Philadelphia Health System
October 7, 2026
•
[ ransomware, healthcare ]
North Philadelphia Health System was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-07. Sector: Healthcare. Country: United States of America. Website: bewellctr.org. bewellctr.org zoominfo.com/c/north-philadelphia-health-system/27968159 The Behavioral Wellness Center at Girard ("Be Well") is a nonprofit addiction and psychiatric treatment provider at 801 W. Girard Ave, Philadelphia, with revenue growing from $38.8M (FY2019) to a record $63.4M (FY2025, 95% from program services), though it posted a $4.4M loss in FY2024 and carries $68.7M in liabilities. Tracing its roots to the 1896 Philadelphia Children's Homeopathic Hospital, it survived a 1990 merger of two bankrupt hospitals, closed St. Joseph's in 2016, filed Chapter 11 that December, and emerged in 2018 after selling its real estate ($8.45M Girard campus sale to Iron Stone) while saving ~500 jobs. Today it employs ~480 staff and runs one of Philadelphia's oldest and largest methadone programs (Goldman Clinic, ~600 clients/day, ~217,000 visits/year), plus detox, residential, and 85 extended-acute psychiatric beds.
-
Alcoholics Anonymous
October 6, 2026
Alcoholics Anonymous was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Healthcare. Country: United States of America. Website: aa.org. aa.org zoominfo.com/c/alcoholics-anonymous/71374 lcoholics Anonymous is a worldwide fellowship of over 2 million members recovering from alcoholism, founded on June 10, 1935, in Akron, Ohio by Bill W. and Dr. Bob, and based on the "12 Steps and 12 Traditions" outlined in its 1939 basic text, the "Big Book" now translated into 70+ languages. aa.org is the official site of the General Service Office (New York) serving the U.S./Canada, with content in English, Spanish, and French, offering free literature (PDF, audio, and ASL versions), a searchable Big Book, meeting finders, and the Meeting Guide app. The fellowship operates in ~180 countries with 123,000+ groups; its 2022 membership survey (6,000 respondents) showed an average age of 52 and 44% with over 10 years of sobriety. A.A. is an "upside-down" organization: ultimate authority rests with autonomous groups, leaders are rotating "trusted servants," and it is fully self-supporting accepting money only from members $7,5k person/year
-
Northwestern Polytechnic
October 6, 2026
•
[ ransomware, education ]
Northwestern Polytechnic was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Education. Country: Canada. Website: nwpolytech.ca. nwpolytech.ca zoominfo.com/c/northwestern-polytechnic/1310919676 Northwestern Polytechnic (NWP) is a publicly funded polytechnic institution founded in 1966 in Grande Prairie, Alberta, serving 3,800+ students (2,227 full-load equivalents) with ~372438 employees under President & CEO Dr. Vanessa Sheane (since 2023). Its annual budget is ~$79.5M CAD (2026-27), funded 62.5% by government grants and 21.9% by student tuition, with total net assets of $49.8M (CRA data). NWP operates across 4 schools (Applied Science & Technology, Business & Education, Health, Skilled Trades) offering apprenticeships, diplomas, and a new Bachelor of Education degree, plus unique research assets like the National Bee Diagnostic Centre Canada's only bee diagnostics lab (NSERC Technology Access Centre) and a 40,000 sq ft Health Education Centre inside the Grande Prairie hospital. The campus features iconic Douglas J. Cardinal architecture (winner of the Prix du XXe Sicle)
-
Rag Electric
October 6, 2026
Rag Electric was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Energy & Utilities. Country: United States of America. Website: ragelectric.com. ragelectric.com zoominfo.com/c/rag-electric-inc/401375471 RAG Electric, Inc. is a private, family-owned electrical contractor founded in 1987 (originally as FEIZ Electric) in Los Angeles, California, incorporated in 2001 and run by founder Farshad Feizbakhsh and his son Matthew. It generates estimated revenue of $25M/year with ~611 employees, holding a clean C-10 electrical license (#510327) active for 38 years with zero violations in CSLB records. Over four decades RAG has powered 7,500+ residential units across the LA metro area, specializing in ground-up multifamily construction, assisted living/senior care, and historic rehabilitation. Recent flagship projects include Vered on Ventura (123-unit assisted living in Encino), Rolling Hills Estates (114-unit memory care), and Sync on Canoga (220-unit multifamily in Canoga Park). Services span full design-build, tenant improvements, underground site work, and emergency troubleshooting all fully NEC/LADBS-compliant, licensed, bonded
-
SAS H2O MICHEL
October 6, 2026
•
[ ransomware, finance ]
SAS H2O MICHEL was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Other. Country: France. Website: h2o-michel.fr. h2o-michel.fr huissiers-bordeaux.com SAS H2O MICHEL is a French commissaire de justice firm (public judicial officer serving court documents, enforcing judgments, debt recovery) created in 2018 and based in Tours/Chinon, Val de Loire (Indre-et-Loire). It is led by President Alexandra Michel and operates 5 offices (Tours, Chinon, Bourgueil, Langeais, Chteau-la-Vallire) with a small team of 37 employees. Revenue grew rapidly from 223K in 2018 to 631K in 2019 (+183%), with a strong 16.4% net margin (103.5K net profit, ROE 85.8%) though all accounts since 2020 are filed confidentially (estimated 600K1M today). The firm is part of H2O Rseau National, France's first national network of commissaires de justice specialized in debt recovery (group network: 160+ staff, 6 major offices). Core services: enforcement of court decisions (saisie-attribution, wage garnishment, evictions, property seizures), debt collection, legal constats, and auction sales.
-
Greenbrook Engineering
October 6, 2026
Greenbrook Engineering was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-10-06. Sector: Manufacturing. Country: United Kingdom of Great Britain and Northern Ireland. Website: greenbrookengineering.com. greenbrookengineering.com zoominfo.com/c/greenbrook-engineering/346757767 Greenbrook Engineering Services is a private, MBE-certified steel detailing and engineering firm founded in 2000, headquartered in Middlesex, New Jersey, with 5 offices in India (Bengaluru, Chennai, Nashik, Mysuru). It employs 350756 people (mostly offshore in India) and generates estimated group revenue of $2030M/year, with the India entity alone growing +22% YoY (25.3 crore FY2025). Over 25 years it has completed 3,000+ projects (Hollywood Burbank Airport, semiconductor fabs, Fiat Chrysler, military bases) with capacity of 50,000+ engineering hours per month. Core services: steel detailing, PE-stamped connection design, BIM coordination, and HVAC using Tekla/SDS2. It is the only steel detailing firm in the world with Great Place to Work certification and won Trimble's "Feature Company of the Month" (2025) and the NISD Detailing Edge Award (2026). Led by Chairman Mukul Mehta (Wharton PhD) and MD Vasan H.R.K.
-
DW McMillan Memorial Hospital
September 21, 2026
•
[ ransomware, healthcare ]
DW McMillan Memorial Hospital was listed as a victim on the leak site of the thegentlemen ransomware group; the attack is estimated to have taken place on 2026-09-21. Sector: Healthcare. Country: United States of America. Website: dwmmh.org. dwmmh.org zoominfo.com/c/dw-mcmillan-memorial-hospital/77170917 D.W. McMillan Memorial Hospital is a small rural hospital in Brewton, Alabama, operating since 1954. It provides a 24/7 emergency room, ICU, surgery, obstetrics, outpatient chemotherapy, lab, imaging, and rehabilitation serving as the main acute-care provider for the county. It has about 3949 beds and employs roughly 85 staff, generating approximately $15 million in annual revenue. The hospital is part of a small county healthcare system that also runs clinics, EMS, and home health services. It has faced serious financial pressure a $6 million deficit but survived after county voters approved a tax increase in December 2025 expected to bring ~$1.8 million per year starting 2027.
-
Vadeto Group
October 9, 2026
•
[ ransomware, technology ]
Vadeto Group was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: Sweden. Website: www.vadetogroup.com.
-
solutend
October 9, 2026
•
[ ransomware, technology ]
solutend was listed as a victim on the leak site of the Panzer ransomware group; the attack is estimated to have taken place on 2026-10-09. Sector: Technology. Bolivian technology company that provides audiovisual systems, digital signage, interactive displays, and business computing solutions.
-
Saber1
October 9, 2026
Saber1 was listed as a victim on the leak site of the Deadlock ransomware group; the attack is estimated to have taken place on 2026-10-09. Country: United States of America. Website: saber1.com. Saber1 Technologies LLC is a American supplier and distributor of machine vision components, industrial cameras and image processing systems.
-
The Margo Hotel
August 19, 2026
•
[ ransomware, retail ]
The Margo Hotel was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-19. Sector: Hospitality. Country: United Kingdom of Great Britain and Northern Ireland. Website: themargohotel.com. The Margo Hotel is a leading 4-star business hotel in Depok that offers premium service, modern facilities for large-scale conferences, and a comfortable stay, and regularly receives top ratings fr...
-
CALICHE
August 11, 2026
CALICHE was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-11. Sector: Energy & Utilities. Country: Chile. Grupo Caliche is a major Spanish corporation engaged in international logistics, freight transportation, and the provision of telecommunications services. The company coordinates the delivery of go...
-
Camandona SA
August 4, 2026
•
[ ransomware, manufacturing ]
Camandona SA was listed as a victim on the leak site of the Majinahanashi ransomware group; the attack is estimated to have taken place on 2026-08-04. Country: Switzerland. Website: camandona.ch. Camandona SA is a major Swiss construction and road-building company founded in 1948 and based in the French-speaking canton of Vaud. It specializes in asphalt paving, road construction, civil engi...
-
hsc.mb.ca
October 10, 2026
•
[ ransomware, healthcare, leak ]
hsc.mb.ca was listed as a victim on the leak site of the incransom ransomware group; the attack is estimated to have taken place on 2026-10-10. Sector: Healthcare. Country: Canada. Website: hsc.mb.ca. The Health Sciences Centre in Winnipeg, one of the largest medical institutions, was targeted by us that resulted in the largest data breach among healthcare institutions. Our group chose not to completely disrupt the facilitys operations, recognizing the potentially devastating consequences that such an action could have had on patients lives and health.
Nevertheless, Health Sciences Centre management stated that no sensitive data had been affected, despite having been informed otherwise.
The data included, but was not limited to, the following information:
Patient medical records:
Full name, date of birth, address and phone number
Hospital medical record number
Diagnoses, medical history, allergies and medications
Laboratory results, imaging reports
Appointment dates, treatment details and physician information.
Employee and healthcare professional information:
Names, contact details, dates of birth and employee numbers
Employment, payroll and banking information
Professional credentials, work schedules and departmental assignments.
Financial and insurance information:
Billing records and payment histories
Insurance or benefits claim information.
Confidential hospital documents:
Internal emails and staff communications
System configurations, network diagrams and security procedures
Database backups and exported spreadsheets.
We would have very much preferred to avoid making this data breach public, but the management has left us with no other choice.
-
Confipetrol
October 11, 2026
•
[ ransomware, energy ]
Confipetrol was listed as a victim on the leak site of the qilin ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Energy & Utilities. Country: Colombia. Website: www.confipetrol.com.
-
Company #27
October 11, 2026
•
[ ransomware, healthcare ]
Company #27 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Healthcare. Country: Australia. neurology practice New South Wales, Australia | [PENDING EXPOSURE: data publishes 2026-10-13 12:37 UTC]
-
Company #28
October 11, 2026
Company #28 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Professional Services. Country: United States of America. architecture & design Florida, USA | [PENDING EXPOSURE: data publishes 2026-10-14 12:00 UTC]
-
Company #29
October 11, 2026
Company #29 was listed as a victim on the leak site of the N0n ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Technology. Country: United States of America. smart building & surveillance integration California, USA | [PENDING EXPOSURE: data publishes 2026-10-14 18:00 UTC]
-
Reed & Giordano PA
October 11, 2026
Reed & Giordano PA was listed as a victim on the leak site of the rhysida ransomware group; the attack is estimated to have taken place on 2026-10-11. Sector: Professional Services. Country: United States of America. Reed & Giordano PA 94,604 files / ~51.3 GBACH instructions for the firm's client trust account (IOLTA) with complete account details; clients' wire-transfer details.PII: W-9/W-2 forms with SSNs, Massachusetts driver's licenses, birth certificate, personal UBS documents of a financial advisor.Client money flows (incoming/outgoing funds by case).Signed conflict-of-interest letter (matter - Alhassan) - a direct written admission of an internal firm problem. More
